CVE-2026-81786: WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerability
Published Sep 10, 2026
·Updated
Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce <= 1.2.2 versions.
Affected Software
1 affected component
WordPress Thank You Page Customizer for WooCommerce<=1.2.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Thank You Page Customizer for WooCommerceto a version that resolves this vulnerability.Fixed in 1.2.2
Event History
Sep 10, 2026
CVE Published
via MITRE·02:23 PM
Data Sourced
via MITRE·02:23 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The issue is described as unauthenticated, so an attacker does not need a WordPress account or existing privileges to exploit it.
2
Which installations are affected?
Thank You Page Customizer for WooCommerce plugin versions up to and including 1.2.2 are identified as affected.
3
What is the potential impact?
The supplied severity vector indicates high confidentiality impact, with no stated integrity or availability impact.